eb213e8ab7b2b0cd6b0cc989603ef8774aaf89ff2afdfe11f29705994b653d38 | Triage

Sharing

General

Target

eb213e8ab7b2b0cd6b0cc989603ef8774aaf89ff2afdfe11f29705994b653d38
Size

516KB
Sample

240711-jmpeeawerr
MD5

56755e8b98ab6c7553d906ca2a1ca2c2
SHA1

0457deba49db59512a397dce03105a37739da967
SHA256

eb213e8ab7b2b0cd6b0cc989603ef8774aaf89ff2afdfe11f29705994b653d38
SHA512

003d5341255569981f07fc26996237d19ad900e89c8adbf1c3195ecc1a8d590aeae2b3ffbc34a7352cdab7ba4028152e2beef383de60f2c9c3d99366247d3b34
SSDEEP

3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxB:dqDAwl0xPTMiR9JSSxPUKYGdodHc

Score

7^/10

Malware Config

Targets

- Target
  
  eb213e8ab7b2b0cd6b0cc989603ef8774aaf89ff2afdfe11f29705994b653d38
- Size
  
  516KB
- MD5
  
  56755e8b98ab6c7553d906ca2a1ca2c2
- SHA1
  
  0457deba49db59512a397dce03105a37739da967
- SHA256
  
  eb213e8ab7b2b0cd6b0cc989603ef8774aaf89ff2afdfe11f29705994b653d38
- SHA512
  
  003d5341255569981f07fc26996237d19ad900e89c8adbf1c3195ecc1a8d590aeae2b3ffbc34a7352cdab7ba4028152e2beef383de60f2c9c3d99366247d3b34
- SSDEEP
  
  3072:dCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VyFNdQMQTCk/dN92sdNhavtrVdewnAxB:dqDAwl0xPTMiR9JSSxPUKYGdodHc
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2